Steve,
The platform is Solaris 10.
PATH=/usr/ccs/bin:/usr/openwin/bin:/opt/SUNWspro/bin:/usr/bin:/usr/local
/bin:/opt/viscobol:/usr/perl5/bin
Steps:
1. extract openssl-fips-1.2
2. ./config fipscanisterbuild
3. make
4. make install
This is part is successful.
5. extract openssl-0.9.8j
6. ./Configure solaris64-sparcv9-cc fips --prefix=/tmp/WWW/openssl
no-shared
7. make
I get the following errors:
making all in crypto/txt_db...
making all in crypto/pkcs7...
making all in crypto/pkcs12...
making all in crypto/comp...
making all in crypto/ocsp...
making all in crypto/ui...
making all in crypto/krb5...
making all in crypto/store...
making all in crypto/pqueue...
making all in fips...
`lib' is up to date.
`fips_premain_dso' is up to date.
cc -I. -I.. -I../include -DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN
-DHAVE_DLFCN_H -xtarget=ultra -xarch=v9 -xO5 -xstrconst -xdepend -Xa
-DB_ENDIAN -DHMAC_EXT=\"${HMAC_EXT:-sha1}\" -DFIPSCANISTER_O -o
fips_standalone_sha1 sha/fips_standalone_sha1.c
/usr/local/ssl/fips-1.0/lib/fipscanister.o
Undefined first referenced
symbol in file
socket
/usr/local/ssl/fips-1.0/lib/fipscanister.o
connect
/usr/local/ssl/fips-1.0/lib/fipscanister.o
ld: fatal: Symbol referencing errors. No output written to
fips_standalone_sha1
*** Error code 1
make: Fatal error: Command failed for target `fips_standalone_sha1'
Current working directory .../extract/openssl/openssl-0.9.8j/fips
*** Error code 1
The following command caused the error:
if [ -z "/usr/local/ssl/fips-1.0/lib/" ]; then \
make -e subdirs lib fips_premain_dso; \
else \
make -e lib fips_premain_dso fips_standalone_sha1; \
fi
make: Fatal error: Command failed for target `all'
Current working directory .../extract/openssl/openssl-0.9.8j/fips
*** Error code 1
The following command caused the error:
dir=fips; target=all; [ -z "libcrypto" ] || if echo " crypto fips ssl
engines apps test tools " | grep " $dir " >/dev/null 2>/dev/null; then
if [ -d "$dir" ]; then ( [ $target != all -a -z "libcrypto" ] &&
FIPSCANLIB=/dev/null; cd $dir && echo "making $target in $dir..." &&
TOP= && unset TOP ${LIB+LIB} ${LIBS+LIBS} ${INCLUDE+INCLUDE}
${INCLUDES+INCLUDES} ${DIR+DIR} ${DIRS+DIRS} ${SRC+SRC}
${LIBSRC+LIBSRC} ${LIBOBJ+LIBOBJ} ${ALL+ALL} ${EXHEADER+EXHEADER}
${HEADER+HEADER} ${GENERAL+GENERAL} ${CFLAGS+CFLAGS}
${ASFLAGS+ASFLAGS} ${AFLAGS+AFLAGS} ${LDCMD+LDCMD}
${LDFLAGS+LDFLAGS} ${SHAREDCMD+SHAREDCMD}
${SHAREDFLAGS+SHAREDFLAGS} ${SHARED_LIB+SHARED_LIB}
${LIBEXTRAS+LIBEXTRAS} && make -e PLATFORM='solaris64-sparcv9-cc'
PROCESSOR='' CC='cc' CFLAG='-DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN
-DHAVE_DLFCN_H -xtarget=ultra -xarch=v9 -xO5 -xstrconst -xdepend -Xa
-DB_ENDIAN' AS='cc' ASFLAG='-DOPENSSL_THREADS
-D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -xtarget=ultra -xarch=v9 -xO5
-xstrconst -xdepend -Xa -DB_ENDIAN -c' AR='ar r'
PERL='/usr/bin/perl' RANLIB='/usr/ccs/bin/ar rs' SDIRS='objects md2
md4 md5 sha hmac ripemd des aes rc2 rc4 idea bf cast bn ec rsa dsa
ecdsa dh ecdh dso engine buffer bio stack lhash rand err evp asn1 pem
x509 x509v3 conf txt_db pkcs7 pkcs12 comp ocsp ui krb5 store pqueue'
LIBRPATH='/tmp/WWW/openssl/lib' INSTALL_PREFIX=''
INSTALLTOP='/tmp/WWW/openssl' OPENSSLDIR='/tmp/WWW/openssl/ssl'
MAKEDEPEND='$${TOP}/util/domd $${TOP} -MD makedepend'
DEPFLAG='-DOPENSSL_NO_DEPRECATED -DOPENSSL_NO_CAMELLIA
-DOPENSSL_NO_CAPIENG -DOPENSSL_NO_CMS -DOPENSSL_NO_GMP
-DOPENSSL_NO_JPAKE -DOPENSSL_NO_MDC2 -DOPENSSL_NO_RC5
-DOPENSSL_NO_RFC3779 -DOPENSSL_NO_SEED' MAKEDEPPROG='makedepend'
SHARED_LDFLAGS='-xarch=v9 -G -dy -z text' KRB5_INCLUDES=''
LIBKRB5='' EXE_EXT='' SHARED_LIBS='' SHLIB_EXT='.so.0.9.8'
SHLIB_TARGET='solaris-shared' PEX_LIBS='' EX_LIBS='-lsocket -lnsl
-ldl' CPUID_OBJ='' BN_ASM='bn_asm.o'
DES_ENC='des_enc-sparc.o fcrypt_b.o' AES_ASM_OBJ='aes_core.o
aes_cbc.o' BF_ENC='bf_enc.o' CAST_ENC='c_enc.o'
RC4_ENC='rc4_enc.o rc4_skey.o' RC5_ENC='rc5_enc.o' SHA1_ASM_OBJ=''
MD5_ASM_OBJ='' RMD160_ASM_OBJ=''
FIPSLIBDIR='/usr/local/ssl/fips-1.0/lib/'
FIPSCANLIB="${FIPSCANLIB:-libcrypto}" FIPSCANISTERINTERNAL='n'
FIPS_EX_OBJ='../crypto/aes/aes_cfb.o ../crypto/aes/aes_ecb.o
../crypto/aes/aes_ofb.o ../crypto/bn/bn_add.o ../crypto/bn/bn_blind.o
../crypto/bn/bn_ctx.o ../crypto/bn/bn_div.o ../crypto/bn/bn_exp2.o
../crypto/bn/bn_exp.o ../crypto/bn/bn_gcd.o ../crypto/bn/bn_lib.o
../crypto/bn/bn_mod.o ../crypto/bn/bn_mont.o ../crypto/bn/bn_mul.o
../crypto/bn/bn_prime.o ../crypto/bn/bn_rand.o ../crypto/bn/bn_recp.o
../crypto/bn/bn_shift.o ../crypto/bn/bn_sqr.o ../crypto/bn/bn_word.o
../crypto/bn/bn_x931p.o ../crypto/buffer/buf_str.o
../crypto/cryptlib.o ../crypto/des/cfb64ede.o ../crypto/des/cfb64enc.o
../crypto/des/cfb_enc.o ../crypto/des/ecb3_enc.o
../crypto/des/ecb_enc.o ../crypto/des/ofb64ede.o
../crypto/des/ofb64enc.o ../crypto/des/fcrypt.o
../crypto/des/set_key.o ../crypto/dsa/dsa_utl.o
../crypto/dsa/dsa_sign.o ../crypto/dsa/dsa_vrf.o ../crypto/err/err.o
../crypto/evp/digest.o ../crypto/evp/enc_min.o ../crypto/evp/e_aes.o
../crypto/evp/e_des3.o ../crypto/evp/p_sign.o ../crypto/evp/p_verify.o
../crypto/mem_clr.o ../crypto/mem.o ../crypto/rand/md_rand.o
../crypto/rand/rand_egd.o ../crypto/rand/randfile.o
../crypto/rand/rand_lib.o ../crypto/rand/rand_os2.o
../crypto/rand/rand_unix.o ../crypto/rand/rand_win.o
../crypto/rsa/rsa_lib.o ../crypto/rsa/rsa_none.o
../crypto/rsa/rsa_oaep.o ../crypto/rsa/rsa_pk1.o
../crypto/rsa/rsa_pss.o ../crypto/rsa/rsa_ssl.o
../crypto/rsa/rsa_x931.o ../crypto/sha/sha1dgst.o
../crypto/sha/sha256.o ../crypto/sha/sha512.o ../crypto/uid.o'
THIS=${THIS:-build_fips} MAKEFILE=Makefile MAKEOVERRIDES= TOP=..
DIR=$dir $target ) || exit 1; fi; fi
make: Fatal error: Command failed for target `build_fips'
I got the same errors when I took out the no-shared option.
Thanks,
Jerry
-----Original Message-----
From: owner-openssl-us...@openssl.org
[mailto:owner-openssl-us...@openssl.org] On Behalf Of Dr. Stephen Henson
Sent: Monday, January 12, 2009 05:03 PM
To: openssl-users@openssl.org
Subject: Re: Problem building Openssl-0.9.8j with fips
On Mon, Jan 12, 2009, Blasdel, Jerry wrote:
> I am having a problem trying to build OpenSSL-0.9.8j fips enabled.
If
> I do not add ${EX_LIBS) to the end of the line below I get errors
> building fips_standalone_sha1. It cannot find socket and connect
> functions.
>
>
>
> Am I missing some environment variables or something else?
>
>
>
> fips_standalone_sha1$(EXE_EXT): sha/fips_standalone_sha1.c
>
> $(CC) $(CFLAGS) -DFIPSCANISTER_O -o $@
> sha/fips_standalone_sha1.c $(FIPSLIBDIR)fipscanister.o $(EX_LIBS)
>
>
Well knowing what platform you are using would help and the
configuration
options you set.
I'm not sure why that would need socket functions... there is no socket
or
network code in that utility.
Have you compiled the 1.2 validated tarball OK?
Steve.
--
Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage
OpenSSL project core developer and freelance consultant.
Homepage: http://www.drh-consultancy.demon.co.uk
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List openssl-users@openssl.org
Automated List Manager majord...@openssl.org
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List openssl-users@openssl.org
Automated List Manager majord...@openssl.org
